GPOs don't apply to XP clients randomly

[reggiep]

We have started to see certain XP clients in our school logging on without applying Group Policy to them. Therefore the client is not getting the correct drive mappings, correct desktop etc.

 

We have two Windows Server 2008 servers chugging along but I think something must be amiss.

 

When I run Group policy modelling wizard I get a an error telling me...

 

Group Policy Infrastructure failed due to the error listed below.

 

Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied.

 

Note: Due to the GP Core failure, none of the other Group Policy components processed their policy. Consequently, status information for the other components is not available.

 

Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 06/01/2011 10:33:47 and 06/01/2011 10:33:59.

 

When I look at the event I see this...

Windows cannot access the file gpt.ini for GPO cn={030B4B15-EC2E-46FD-8594-0335A81FBA0D},cn=policies,cn=system,DC=PRENTONHIGH,DC=local. The file must be present at the location <\\PRENTONHIGH.local\SysVol\PRENTONHIGH.local\Policies\{030B4B15-EC2E-46FD-8594-0335A81FBA0D}\gpt.ini>. (Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied. ). Group Policy processing aborted.

 

I suspect that when the client tries to run the policies that if it goes to one of the servers it is having problems.

 

I have no idea why it is doing this and I am googling like crazy BUT if anyone has any ideas I would be pleased.

 

Thanks

[cpjitservices]

Try a restart on the Server Service, might trigger it and try a gpupdate /f on server and client might just kick it up the back bottom.

[Domino]

not sure if its just a typo but there appears to be a rogue space in 'policies' here:

<\\PRENTONHIGH.local\SysVol\PRENTONHIGH.local\Poli cies\{030B4B15-EC2E-46FD-8594-0335A81FBA0D}\gpt.ini>

 

Is that showing on both DCs, maybe ones correct and one isn't? Just a thought.

 

Also is replication running properly between the two dcs? maybe worth forcing a replicate

[reggiep]

Argh!! And I think I mean it.

 

I have no Sysvol on my second server! I has gone, disappeared and done a runner!

 

How could that have happened, in fact more importantly how can I get it back?

 

[Domino]

Hmm, no idea how it could have happened.

 

Safest way of making sure everything comes back happy would be a demoting the dc then repromoting it I imagine. there probably is a hacky way round it, but that way you'll know everything is back in as it should be.

[reggiep]

I guess I will give the old dcpromo a go.

 

Thanks

[reggiep]

Well that seems to have worked, to a point!

 

When I ran DCPROMO it did not ask to demote so I just promoted it and joined it to my domain.

 

My sysvol has returned BUT at the moment it is not shared and is not full of the lovely files that my other DC is?

[Domino]

I imagine its doing the inital config still.

 

Is it listed in AD sites and services?

[reggiep]

Yes it's there now!

[Domino]

WHoop! nicely done :-)